SUSE-SU-2023:0634-1

SUSE-SU-2023:0634-1 · Security update for the Linux Kernel

Здесь приведены факты из открытых источников об уязвимостях. Перед обновлением ознакомьтесь с исходным сообщением.

На странице показана часть фактов из источников. Полное описание и список затронутых версий приведены в связанных бюллетенях.

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bsc#1194535). - CVE-2017-5754: Fixed speculative side channel attacks on various CPU platforms (bsc#1068032). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2022-4662: Fixed incorrect access control in the USB core subsystem that could lead a local user to crash the system (bsc#1206664). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420). - CVE-2023-0266: Fixed a use-after-free vulnerability inside the ALSA PCM package. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 was missing locks that could have been used in a use-after-free that could have resulted in a priviledge escalation to gain ring0 access from the system user (bsc#1207134). - CVE-2022-47929: Fixed NULL pointer dereference bug in the traffic control subsystem (bsc#1207237). The following non-security bugs were fixed: - add 00f3ca2c2d66 ('mm: memcontrol: per-lruvec stats infrastructure') - add 0b3d6e6f2dd0 mm: writeback: use exact memcg dirty counts - add 168e06f7937d kernel/hung_task.c: force console verbose before panic - add 1f4aace60b0e ('fs/seq_file.c: simplify seq_file iteration code and interface') - add 304ae42739b1 kernel/hung_task.c: break RCU locks based on jiffies - add 401c636a0eeb kernel/hung_task.c: show all hung tasks before panic - add Tegra repository to git_sort. - add a1c6ca3c6de7 kernel: hung_task.c: disable on suspend - add c3cc39118c36 mm: memcontrol: fix NR_WRITEBACK leak in memcg and system stats - add c892fd82cc06 mm: memcg: add __GFP_NOWARN in __memcg_schedule_kmem_cache_create() - add e27be240df53 mm: memcg: make sure memory.events is uptodate when waking pollers - add support for enabling livepatching related packages on -RT (jsc#PED-1706) - add suse-kernel-rpm-scriptlets to kmp buildreqs (boo#1205149) - amiflop: clean up on errors during setup (git-fixes). - audit: ensure userspace is penalized the same as the kernel when under pressure (bsc#1204514). - audit: improve robustness of the audit queue handling (bsc#1204514). - bcache: fix super block seq numbers comparision in register_cache_set() (git-fixes). - blk-cgroup: Fix memleak on error path (git-fixes). - blk-cgroup: Pre-allocate tree node on blkg_conf_prep (git-fixes). - blk-cgroup: fix missing put device in error path from blkg_conf_pref() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: insert request not through ->queue_rq into sw/scheduler queue (git-fixes). - blk-mq: move cancel of requeue_work into blk_mq_release (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - blktrace: break out of blktrace setup on concurrent calls (git-fixes). - blktrace: ensure our debugfs dir exists (git-fixes). - blktrace: fix endianness for blk_log_remap() (git-fixes). - blktrace: fix endianness in get_pdu_int() (git-fixes). - blktrace: use errno instead of bi_status (git-fixes). - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group() (bsc#1175995,jsc#SLE-15608). - block, bfq: fix overwrite of bfq_group pointer in bfq_find_set_group() (git-fixes). - block, bfq: increase idling for weight-raised queues (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (bsc#1207102). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bio-integrity: do not free 'buf' if bio_integrity_add_page() failed (git-fixes). - block/bio-integrity: fix a memory leak bug (git-fixes). - block/swim: Check drive type (git-fixes). - block/swim: Do not log an error message for an invalid ioctl (git-fixes). - block/swim: Fix IO error at end of medium (git-fixes). - block/swim: Rename macros to avoid inconsistent inverted logic (git-fixes). - block/swim: Select appropriate drive on device open (git-fixes). - block: Fix use-after-free issue accessing struct io_cq (git-fixes). - block: add a lower-level bio_add_page interface (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: fix memleak when __blk_rq_map_user_iov() is failed (git-fixes). - block: sed-opal: fix IOC_OPAL_ENABLE_DISABLE_MBR (git-fixes). - brd: check and limit max_part par (git-fixes). - compat_ioctl: block: handle BLKGETZONESZ/BLKGETNRZONES (git-fixes). - constraints: increase disk space for all architectures References: bsc#1203693 aarch64 is already suffering. SLE15-SP5 x86_64 stats show that it is very close to the limit. - cpu/hotplug: Fix 'SMT disabled by BIOS' detection for KVM (git-fixes). - cryptoloop: add a deprecation warning (git-fixes). - d6810d730022 ('memcg, THP, swap: make mem_cgroup_swapout() support THP') - dm bio record: save/restore bi_end_io and bi_integrity (git-fixes). - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm crypt: use u64 instead of sector_t to store iv_offset (git-fixes). - dm flakey: Properly corrupt multi-page bios (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm kcopyd: Fix bug causing workqueue stalls (git-fixes). - dm raid: avoid bitmap with raid4/5/6 journal device (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm space maps: do not reset space map allocation cursor when committing (git-fixes). - dm table: Remove BUG_ON(in_interrupt()) (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: add sanity checks to thin-pool and external snapshot creation (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm verity: skip verity work if I/O error when system is shutting down (git-fixes). - dm verity: use message limit for data block corruption message (git-fixes). - dm zoned: return NULL if dmz_get_zone_for_reclaim() fails to find a zone (git-fixes). - dm: Use kzalloc for all structs with embedded biosets/mempools (git-fixes). - do not dump the threads that had been already exiting when zapped (git-fixes). - drbd: Change drbd_request_detach_interruptible's return type to int (git-fixes). - drbd: destroy workqueue when drbd device was freed (git-fixes). - drbd: do not block when adjusting 'disk-options' while IO is frozen (git-fixes). - drbd: dynamically allocate shash descriptor (git-fixes). - drbd: fix potential silent data corruption (git-fixes). - drbd: fix print_st_err()'s prototype to match the definition (git-fixes). - drbd: ignore 'all zero' peer volume sizes in handshake (git-fixes). - drbd: reject attach of unsuitable uuids even if connected (git-fixes). - drbd: remove usage of list iterator variable after loop (git-fixes). - drbd: use after free in drbd_create_device() (git-fixes). - drivers/block/zram/zram_drv.c: fix bug storing backing_dev (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - ext4: Detect already used quota file early (bsc#1206873). - ext4: Fixup pages without buffers (bsc#1205495). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add reserved GDT blocks check (bsc#1202712). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid resiz

Есть исправление

Опубликовано

2023-03-07T10:35:44Z

Обновлено

2026-02-04T03:12:16.001395Z

Стек: system

Проверьте свой сервер →